From a0d15027e3b0c7825cc10052363b72e9398578b9 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Fri, 10 Aug 2012 00:09:34 +0200 Subject: [PATCH] yadif: check input video size. yadif needs at least 3x3 or it will likely crash with out of array reads Signed-off-by: Michael Niedermayer --- libavfilter/vf_yadif.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libavfilter/vf_yadif.c b/libavfilter/vf_yadif.c index d25c7b11b4..f200cb1474 100644 --- a/libavfilter/vf_yadif.c +++ b/libavfilter/vf_yadif.c @@ -221,6 +221,11 @@ static int start_frame(AVFilterLink *link, AVFilterBufferRef *picref) av_assert0(picref); + if (picref->video->h < 3 || picref->video->w < 3) { + av_log(ctx, AV_LOG_ERROR, "Video of less than 3 columns or lines is not supported\n"); + return AVERROR(EINVAL); + } + if (yadif->frame_pending) return_frame(ctx, 1);